/** * Sanitizes an SVG markup string so it is safer to inject via `innerHTML`. * * Rules: * - Drops blocked elements (`script`, `foreignObject`, `iframe`, etc.) * - Removes event handler attributes (`on*`) * - Allows URL-like attributes only when they are local fragment references (`#...`) * * Returns an empty string when no SVG root exists. */ export declare function sanitizeSvgMarkup(svgMarkup: string): string; /** * Same sanitization as {@link sanitizeSvgMarkup}, but returns the cloned SVG element * ready to attach via `appendChild` / `replaceChildren`. Lets callers avoid assigning * markup strings to `innerHTML` at the call site. * * Returns `null` when no SVG root exists. */ export declare function sanitizeSvgToElement(svgMarkup: string): Element | null;